CVE-2020-25879

MEDIUM 5.4CVE-2020-25879 · Published 09/07/2021 · updated 17/06/2026

In short

CVE-2020-25879 is a MEDIUM (CVSS 5.4) vulnerability affecting codoforum (codologic).
Chance of exploitation in the next 30 days (EPSS): 0.45%, higher than 39.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
codoforum codologic	`= 5.0.2`	No fix yet

Description

A stored cross site scripting (XSS) vulnerability in the 'Manage Users' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Username' parameter.

References

codoforum.com · Product
r0ck3t1973/xss_payload · Exploit

More vulnerabilities in codoforum

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

codoforum

codologic

= 5.0.2

No fix yet

More vulnerabilities in codoforum

See all →